A very impressive bit of spam has picked up on the arrse email address claiming that a password has been updated. Impressive as it automatically fills out some of the email fields with 'arrse' (taken from the domain name of the email address). It has also slipped through out spam filter so I'm sure will make it through others for a short while at least. This is explained here: http://www.domaindirectnews.com/2006/11/fraudvirus_warn.html So, if you get an email "Your password has been successfully updated" from firstname.lastname@example.org (this email address doesn't exist), please ignore it. It also does not mean that your email address has been compromised through the site - it's just spam doing the rounds as normal.